Ask HN: How do you track your API keys from ending up on GitHub?

I have seem many people leave twiiter, yelp, rotten tomatoes API keys on open forums like Github. Is it aceepatbe if you are the API provider? What problems do you see?

Do you know how to mitigate/detect this situation?